Richard Levitte [Thu, 20 Mar 2003 16:34:29 +0000 (16:34 +0000)]
Add documentation for -starttls (s_client) and -id_prefix (s_server).
PR: 542
Richard Levitte [Thu, 20 Mar 2003 11:44:31 +0000 (11:44 +0000)]
Some shells (ksh in this case) don't say 'command not found'.
PR: 540
Richard Levitte [Thu, 20 Mar 2003 11:42:01 +0000 (11:42 +0000)]
Spelling errors.
PR: 538
Richard Levitte [Thu, 20 Mar 2003 11:37:55 +0000 (11:37 +0000)]
Make sure that all the library paths are modified in prepend mode, not
replace mode.
PR: 528
Richard Levitte [Thu, 20 Mar 2003 11:15:16 +0000 (11:15 +0000)]
hinv may generate more than one line (1 line per CPU).
PR: 520
Richard Levitte [Thu, 20 Mar 2003 10:57:12 +0000 (10:57 +0000)]
Shut up an ANSI compiler about uninitialised variables.
PR: 517
Richard Levitte [Thu, 20 Mar 2003 10:50:40 +0000 (10:50 +0000)]
Add the target linux-ia64-ecc, suggested by Keith Thompson <kst@sdsc.edu>.
PR: 516
Bodo Möller [Wed, 19 Mar 2003 19:19:58 +0000 (19:19 +0000)]
countermeasure against new Klima-Pokorny-Rosa atack
Bodo Möller [Wed, 19 Mar 2003 18:58:55 +0000 (18:58 +0000)]
make sure RSA blinding works when the PRNG is not properly seeded;
enable it automatically only for the built-in engine
Dr. Stephen Henson [Wed, 19 Mar 2003 13:56:32 +0000 (13:56 +0000)]
Fix Certificate and CRL adding in X509_load_cert_crl_file:
an X509_INFO structure can contain more than one object,
for example a certififcate and a CRL.
Bodo Möller [Tue, 18 Mar 2003 12:50:21 +0000 (12:50 +0000)]
fix formatting
Ben Laurie [Tue, 18 Mar 2003 12:12:10 +0000 (12:12 +0000)]
Turn on RSA blinding by default.
Dr. Stephen Henson [Sat, 15 Mar 2003 01:29:18 +0000 (01:29 +0000)]
Fix for no-ec on Windows.
Dr. Stephen Henson [Fri, 14 Mar 2003 23:37:17 +0000 (23:37 +0000)]
Don't give an error if response reason absent in OCSP HTTP.
Dr. Stephen Henson [Fri, 14 Mar 2003 01:45:44 +0000 (01:45 +0000)]
Add entry for domainComponent so it is treated correctly.
Add table order test to end of a_strnid.c
Dr. Stephen Henson [Thu, 13 Mar 2003 21:26:31 +0000 (21:26 +0000)]
Get the PEDANTIC stuff right this time...
Geoff Thorpe [Thu, 13 Mar 2003 20:23:19 +0000 (20:23 +0000)]
Fix a bone-head bug. This warrants a CHANGES entry because it could affect
applications if they were passing a bogus 'flags' parameter yet having
things work as they wanted anyway.
Dr. Stephen Henson [Thu, 13 Mar 2003 14:10:11 +0000 (14:10 +0000)]
Return an error if gmtime returns NULL.
Dr. Stephen Henson [Wed, 12 Mar 2003 02:38:35 +0000 (02:38 +0000)]
Avoid warnings for no-engine and PEDANTIC
Dr. Stephen Henson [Wed, 12 Mar 2003 02:31:12 +0000 (02:31 +0000)]
Fixes for EVP_DigestInit_ex() and OPENSSL_NO_ENGINE.
Bodo Möller [Fri, 28 Feb 2003 15:16:30 +0000 (15:16 +0000)]
memset problem has been handled
PR: 343
Dr. Stephen Henson [Thu, 27 Feb 2003 14:08:44 +0000 (14:08 +0000)]
Encryption BIOs misbehave when used with non blocking I/O.
Two fixes:
1. If BIO_write() fails inside enc_write() it should return the
total number of bytes successfully written.
2. If BIO_write() fails during BIO_flush() it should return immediately
with the error code: previously it would fall through to the final
encrypt, corrupting the buffer.
Dr. Stephen Henson [Thu, 27 Feb 2003 13:03:27 +0000 (13:03 +0000)]
Typo.
Bodo Möller [Mon, 24 Feb 2003 17:16:32 +0000 (17:16 +0000)]
year 2003
Ulf Möller [Sat, 22 Feb 2003 23:13:55 +0000 (23:13 +0000)]
get rid of a bad character
Ulf Möller [Sat, 22 Feb 2003 23:00:25 +0000 (23:00 +0000)]
Add instructions for building the MinGW target in Cygwin, and
rearrange some of the other text for better readability.
Ulf Möller [Sat, 22 Feb 2003 22:59:01 +0000 (22:59 +0000)]
replace symlink with copy, as in head
Ulf Möller [Sat, 22 Feb 2003 18:02:46 +0000 (18:02 +0000)]
mingw related cleanups, as in head
Richard Levitte [Sat, 22 Feb 2003 15:04:06 +0000 (15:04 +0000)]
Remove duplication and have clean depend on libclean
Ulf Möller [Sat, 22 Feb 2003 01:25:37 +0000 (01:25 +0000)]
mingw related changes as in head
Richard Levitte [Wed, 19 Feb 2003 12:55:39 +0000 (12:55 +0000)]
Let's move on to development of 0.9.7b.
Richard Levitte [Wed, 19 Feb 2003 12:33:55 +0000 (12:33 +0000)]
Time to release 0.9.7a.
The tag will be OpenSSL_0_9_7a.
Richard Levitte [Wed, 19 Feb 2003 12:04:16 +0000 (12:04 +0000)]
Security fix: Vaudenay timing attack on CBC.
An advisory will be posted to the web. Expect a release within the hour.
Richard Levitte [Wed, 19 Feb 2003 11:54:57 +0000 (11:54 +0000)]
Make sure the memory allocation routines check for negative sizes
Richard Levitte [Wed, 19 Feb 2003 11:22:18 +0000 (11:22 +0000)]
Borland C++ Builder 5 complains about unreachable statements.
Richard Levitte [Tue, 18 Feb 2003 12:15:13 +0000 (12:15 +0000)]
Make the no-err option work properly
Bodo Möller [Sun, 16 Feb 2003 20:10:26 +0000 (20:10 +0000)]
Remove "+Olibcalls" option from HPUX targets.
Reportedly this option is deprecated, and on some systems
"make test" fails if it is included.
PR: 495
Bodo Möller [Fri, 14 Feb 2003 14:43:31 +0000 (14:43 +0000)]
mask old error codes so that mkerr.pl does not re-add them
Bodo Möller [Fri, 14 Feb 2003 14:40:04 +0000 (14:40 +0000)]
make update
Richard Levitte [Fri, 14 Feb 2003 13:30:43 +0000 (13:30 +0000)]
Add support for IA64.
PR: 454
Richard Levitte [Fri, 14 Feb 2003 13:11:44 +0000 (13:11 +0000)]
Handle krb5 libraries separately and make sure only libssl.so depends
on it.
Richard Levitte [Fri, 14 Feb 2003 08:56:25 +0000 (08:56 +0000)]
Update linux-mips and linux-mipsel to support threads and shared libraries.
I also updated the bn_ops field with values taken from OpenBSD-mips.
PR: 498
Richard Levitte [Fri, 14 Feb 2003 05:24:25 +0000 (05:24 +0000)]
Pay attention to disabled SSL versions.
PR: 500
Richard Levitte [Fri, 14 Feb 2003 05:20:28 +0000 (05:20 +0000)]
Change no_rmd160 to no_ripemd for consistency.
PR: 500
Richard Levitte [Fri, 14 Feb 2003 01:03:06 +0000 (01:03 +0000)]
Make it possible to disable OCSP, the speed application, and the use of sockets.
PR: 358
Richard Levitte [Thu, 13 Feb 2003 08:53:43 +0000 (08:53 +0000)]
Oh, the destest program did look at the return value...
Richard Levitte [Wed, 12 Feb 2003 17:20:50 +0000 (17:20 +0000)]
Adjust DES_cbc_cksum() so the returned value is the same as MIT's
mit_des_cbc_cksum(). The difference was first observed, then verified by
looking at the MIT source.
Dr. Stephen Henson [Wed, 12 Feb 2003 17:05:17 +0000 (17:05 +0000)]
Option to disable auto SSL chain building.
Bodo Möller [Wed, 12 Feb 2003 14:17:38 +0000 (14:17 +0000)]
comments
Richard Levitte [Thu, 6 Feb 2003 19:30:14 +0000 (19:30 +0000)]
PKCS#1 has a new RFC, which we do implement
Bodo Möller [Thu, 6 Feb 2003 18:07:23 +0000 (18:07 +0000)]
additional sanity checks for arguments to EC_POINTs_mul()
Bodo Möller [Thu, 6 Feb 2003 18:00:20 +0000 (18:00 +0000)]
EC_GROUP_get_extra_data() should not set an error when it returns NULL.
(NB: this is not an API change because this internal function is unused
in 0.9.7. 0.9.8-dev will use it, and will contain a similar change).
Bodo Möller [Wed, 5 Feb 2003 16:50:50 +0000 (16:50 +0000)]
typo in WIN16 section
Submitted by: Toni Andjelkovic <toni@soth.at>
Bodo Möller [Wed, 5 Feb 2003 16:37:17 +0000 (16:37 +0000)]
SSL_add_dir_cert_subjects_to_stack now exists for WIN32
Bodo Möller [Tue, 4 Feb 2003 12:57:37 +0000 (12:57 +0000)]
typo
Bodo Möller [Tue, 4 Feb 2003 12:26:48 +0000 (12:26 +0000)]
Update PRNG entry:
- OpenSSL version differences
- Sun /dev/urandom patch information
Richard Levitte [Fri, 31 Jan 2003 12:20:41 +0000 (12:20 +0000)]
We can't say in advance what the argument to BIO_socket_ioctl() should be, so
let's make that a void *. Also, BIO_socket_nbio() should send it an int
argument, not a long.
PR: 457
Richard Levitte [Thu, 30 Jan 2003 22:02:31 +0000 (22:02 +0000)]
Document -engine where missing.
PR: 424
Richard Levitte [Thu, 30 Jan 2003 21:49:16 +0000 (21:49 +0000)]
A few small bugs with BIO popping.
PR: 364
Richard Levitte [Thu, 30 Jan 2003 20:03:48 +0000 (20:03 +0000)]
The util scripts need to handled no-hw.
PR: 327
Richard Levitte [Thu, 30 Jan 2003 19:05:27 +0000 (19:05 +0000)]
The MASM situation is more difficult than described so far. It is part of VC++ 7.
PR: 327
Richard Levitte [Thu, 30 Jan 2003 19:01:59 +0000 (19:01 +0000)]
For VC++7 and up, the file is VSVARS32.BAT.
PR: 327
Richard Levitte [Thu, 30 Jan 2003 18:52:52 +0000 (18:52 +0000)]
The OPENSSL_NO_ENGINE has small problem: it changes certain structures. That's
bad, so let's not check OPENSSL_NO_ENGINE in those places. Fortunately, all
the header files where the problem existed include ossl_typ.h, which makes
a 'forward declaration' of the ENGINE type.
Richard Levitte [Thu, 30 Jan 2003 17:58:25 +0000 (17:58 +0000)]
make update
Richard Levitte [Thu, 30 Jan 2003 17:37:49 +0000 (17:37 +0000)]
Add the possibility to build without the ENGINE framework.
PR: 287
Richard Levitte [Thu, 30 Jan 2003 11:08:47 +0000 (11:08 +0000)]
Small typo, OENSSL should really be spelled OPENSSL.
PR: 476
Richard Levitte [Thu, 30 Jan 2003 11:00:37 +0000 (11:00 +0000)]
Fix a memory leak in SSL.
PR: 477
Richard Levitte [Thu, 30 Jan 2003 10:27:47 +0000 (10:27 +0000)]
cert_sk isn't always allocated, so freeing it may cause a crash.
PR: 481
Richard Levitte [Wed, 29 Jan 2003 15:06:38 +0000 (15:06 +0000)]
DVCS (see RFC 3029) was missing among the possible purposes.
Notified privately to me by Peter Sylvester <Peter.Sylvester@EdelWeb.fr>,
one of the authors of said RFC
Dr. Stephen Henson [Sun, 26 Jan 2003 13:39:24 +0000 (13:39 +0000)]
Correct EVP_SealInit() documentation, iv is an output
parameter.
Bodo Möller [Fri, 24 Jan 2003 22:27:00 +0000 (22:27 +0000)]
consistency
Andy Polyakov [Fri, 24 Jan 2003 09:38:18 +0000 (09:38 +0000)]
Provide "dummy" &main::picmeup even in Windows perlasm modules.
Dr. Stephen Henson [Fri, 24 Jan 2003 00:42:50 +0000 (00:42 +0000)]
Check return value of gmtime() and add error codes
where it fails in ASN1_TIME_set().
Clear error queue in req.c if *_min or *_max is absent.
Andy Polyakov [Thu, 23 Jan 2003 10:05:59 +0000 (10:05 +0000)]
Workaround for lame compiler bug introduced in "CPU pack" for MSVC6SP5.
Andy Polyakov [Thu, 23 Jan 2003 09:51:55 +0000 (09:51 +0000)]
The patch speaks for itself.
Richard Levitte [Thu, 23 Jan 2003 08:10:07 +0000 (08:10 +0000)]
Missing 0 broke FreeBSD build.
PR: 470
Andy Polyakov [Sun, 19 Jan 2003 21:45:52 +0000 (21:45 +0000)]
Suggestion was to change ${MACHINE} to i586 in lines in question. Well,
"whatever" doesn't the same (avoids 386 being passed to ./Configure),
consistent with other elder SCO targets and denotes that we probably
shouldn't care much about every out-of-date platform.
Andy Polyakov [Sun, 19 Jan 2003 21:31:20 +0000 (21:31 +0000)]
This is an *initial* tune-up. This update puts Itanium2 back on par with
Itanium. I mean if overall performance improvement over C version was X
for Itanium, it's now X even for Itanium2.
Andy Polyakov [Sun, 19 Jan 2003 11:39:56 +0000 (11:39 +0000)]
Oops! Missed closing quote... Didn't have time to verify before a snapshot
was cut...
Andy Polyakov [Sat, 18 Jan 2003 21:59:19 +0000 (21:59 +0000)]
SCO target missed .so definition.
Andy Polyakov [Sat, 18 Jan 2003 18:11:10 +0000 (18:11 +0000)]
-lresolv is not present on SCO Unix, RT#460.
Andy Polyakov [Sat, 18 Jan 2003 14:59:19 +0000 (14:59 +0000)]
Caldera/SCO targets erroneously limit themselves to 386. See RT#464.
Andy Polyakov [Sat, 18 Jan 2003 13:10:23 +0000 (13:10 +0000)]
Fix for AIX shared build, see RT#463.
Dr. Stephen Henson [Fri, 17 Jan 2003 00:46:08 +0000 (00:46 +0000)]
EVP_DecryptInit() should call EVP_CipherInit() not EVP_CipherInit_ex().
Richard Levitte [Thu, 16 Jan 2003 21:33:06 +0000 (21:33 +0000)]
A few more files to ignore
Richard Levitte [Thu, 16 Jan 2003 18:29:34 +0000 (18:29 +0000)]
FreeBSD has /dev/crypto as well.
PR: 462
Lutz Jänicke [Thu, 16 Jan 2003 17:21:15 +0000 (17:21 +0000)]
Armor against systems without ranlib...
Submitted by: Thierry Lelegard <thierry.lelegard@canal-plus.fr>
PR: 461
Lutz Jänicke [Thu, 16 Jan 2003 07:54:12 +0000 (07:54 +0000)]
ncr-scde target needs -lc89 for strcasecmp() and ftime() (Tim Rice, Martin
Megele).
PR: 450
Richard Levitte [Thu, 16 Jan 2003 06:00:59 +0000 (06:00 +0000)]
Fix possible NULL dereferencial.
Notified by Verdon Walker <VWalker@novell.com>
Richard Levitte [Wed, 15 Jan 2003 17:23:28 +0000 (17:23 +0000)]
Add verbosity
Richard Levitte [Wed, 15 Jan 2003 17:19:38 +0000 (17:19 +0000)]
make update
Lutz Jänicke [Wed, 15 Jan 2003 14:56:47 +0000 (14:56 +0000)]
Fix initialization sequence to prevent freeing of unitialized objects.
Submitted by: Nils Larsch <nla@trustcenter.de>
PR: 459
Lutz Jänicke [Wed, 15 Jan 2003 09:48:29 +0000 (09:48 +0000)]
Really fix SSLv2 session ID handling
PR: 377
Dr. Stephen Henson [Tue, 14 Jan 2003 20:52:58 +0000 (20:52 +0000)]
Set EXPORT_VAR_AS_FN for BC-32 to work around a compiler bug,
Richard Levitte [Tue, 14 Jan 2003 15:46:36 +0000 (15:46 +0000)]
Extend the HOWTO on creating certificates, and add a HOWTO in creating keys.
PR: 422
cvs2svn [Tue, 14 Jan 2003 15:42:19 +0000 (15:42 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Tue, 14 Jan 2003 15:42:16 +0000 (15:42 +0000)]
Extend the HOWTO on creating certificates, and add a HOWTO in creating keys.
PR: 422
Lutz Jänicke [Tue, 14 Jan 2003 13:57:06 +0000 (13:57 +0000)]
Document hpux-parisc2-cc problems, probably due to optimizer bug.
PR: 426
Richard Levitte [Tue, 14 Jan 2003 13:56:41 +0000 (13:56 +0000)]
Correct an example that has a few typos.
PR: 458
Richard Levitte [Tue, 14 Jan 2003 13:56:38 +0000 (13:56 +0000)]
Correct an example that has a few typos.
PR: 458